Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“after the latest update this app doesn't open in my tab”
Google Play · 1/5 · 2026-07-15

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514629481

Proof data

Record hash (SHA-256): 665b47b07d146ceeb588aeaa87f6267d6f9c8243b2f12aec98d0855e1b71a01d
Signature (Ed25519, base64): 2sMs3E0CU54qiwdfk8tL0CUrrecDOeY6t9PZGjkagCNmLgmdMdsif9y9wt7Reqj+xk8k+8gwlwHPKCNB6xE9Cw==
Merkle root: 3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2
Merkle path: ["665d1af4540202f2e8bec3d9cc15ed85cf90a5803ed0111a8e10f6d11bcba61d","94d3d279603c6e4539a9addd63f59b765397aa753b3527f3d071387e5dee489f","842bcb05595889ee6a613d6256e4f3ea5ce909514c382fa8897aa3bfdc85ea73","4e4af04256fae03584ec844943e0003cb1532a6f6af677bffdae9730e695c133","8f16bfa2c0f68230dbba74fb67292339ffccf29a49657a3309d3000207e14c09","8a1df24c1255628cf39dc053d9b71ab6d93da6357dcd1ef16a7c4ffc5b940497","37e7c95bd18045d42fc9924fed94b8945e21d3e1f7e58f23a98ecaad44263f50","ad2b1ec9a46a1d9c3fd0c78dbb8cfb8a6ea7f3e6657448e8f6798ac6aa16d594","26bd44f9bdd8e8624d476289e60cea6cf246ff409a16b8e14a86bf8b8842b737","8fbd98a95dd72089d35d4355a0420a92f1338cc8779699e8dcbbf80400dd7d32","017cfa23e6573ca802a0e0a59eadde8ec4fc7cfcc8a919e905bc86249e550129","e7a94d04437720fd8cf992ee6dab38693216414c2bb6c93ff213fee7a308d432","f012a8a26dfa958fe562e54b8cec123a4f52269d633080fe9e680be84eb62329","2f00626bc88d01c042a52bec5a9d951d8fcf3187df280beda8f094e8085a220b","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…
Expected log hash: d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787131980797","kind":"published-quote","locale":"en","page":"theme:xodo/ordering/en","quote":"after the latest update this app doesn't open in my tab","rating":1,"review_date":"2026-07-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.